System and method for accessing node of private network

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a system and method for accessing a node of a network, and more particularly to a system and method for accessing a node of a private network via the Internet. The present application is based on Korean Patent Application No. 2000-50259, which is incorporated herein by reference.

2. Description of the Background Art

Thanks to a technology advancement, information and communication devices such as computers, faxes, modems and telephones of an office can now be efficiently used in connection with each other within one network.

Most of the Small Office Home Office (SOHO) or home networks are private networks which are not assigned with global IP addresses.

A network without the global IP address should be connected to an Internet Service Provider (ISP) and assigned with a temporary global IP address, to access an external network.

Meanwhile, even if the SOHO or home network has the global IP address, only an access node of the office has the global IP address. Accordingly, other information and communication devices in the SOHO or home network are assigned with private IP addresses for use therewithin.

The private IP address is either assigned by a network administrator, or dynamically assigned by a Dynamic Host Configuration Protocol (DHCP).

In order to access a node of an external network, value of the nodes has to be converted from the private IP address into a global IP address.

When an internal node having a private IP address uses an external server via the Internet, a gateway in the access node of the private network assigns external port value to the internal node and sends out a packet by using a Network Address Port Translation (NAPT).

When receiving a response packet from the external network, the gateway restores the original private IP address and port value based on a port value included in the packet.

Here, the port value may be varied according to a type of communication protocols being used such as http, FTP and TELNET.

In the private network having the private IP address and constructed based on the NAPT, however, it is impossible for the other networks to obtain the port values of the nodes and send a packet to the nodes of the private network.

SUMMARY OF THE INVENTION

The present invention has been made to overcome the abovementioned problems of the related art, and accordingly, it is an object of the present invention to provide a system and method enabling an access among private networks which are not assigned with global IP addresses, by assigning external port values to internal nodes of the private networks and exchanging the assigned port values with each other.

The above object will be accomplished by a system for accessing a node of a private network according to the present invention, including an assigning portion for assigning external port values to respective network nodes based on information collected from the network nodes of the private network, and storing the assigned external port values; an exchanging portion for exchanging the external port values of the respective network nodes of private networks; and an address converting portion for converting the external port values into corresponding private IP addresses and internal port values when a network node of one private network accesses another network node of another private network by using the external port values of another network node of another private network.

The above object is also accomplished by a method for accessing a node of a private network according to the present invention, including the steps of a) assigning separate external port values to a plurality of network nodes of the private networks based on information collected from the network nodes, and storing the assigned external port values; b) exchanging the assigned external port value of a certain network node of a certain private external port values to network nodes based on information collected from the network nodes; a first exchanging portion for exchanging external port value of a certain node of the first network with external port value of one of the nodes of the second network, and storing the exchanged external port value; and a first address converting portion for converting the external port value of the certain node of the first network into a corresponding external port value, enabling the certain node of the first network to access the one of network nodes of the second network, while the second network includes a second external port value assigning portion for assigning external port values to network nodes based on information collected from the network nodes; a second exchanging portion for exchanging external port value of a certain node of the second network with external port value of one of the nodes of the first network, and storing the exchanged external port value; and a second address converting portion for converting the external port of the certain node of the second network into a corresponding private IP address, enabling the one of the nodes of the first network to access the certain node of the second network by using the external port value of the one of the nodes of the second network.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention will become better understood with reference to the accompanying drawings which are given only by way of illustration and thus do not limit the present invention, wherein:

<figref idref="DRAWINGS">FIG. 1</figref> is a view for showing the structure of a network according to the present invention;

<figref idref="DRAWINGS">FIG. 2</figref> is a block diagram for showing a system for accessing a node of the private network according to the present invention;

<figref idref="DRAWINGS">FIG. 3</figref> is a flowchart for explaining the process of assigning an external port value to the node of the network and building a database according to the present invention;

<figref idref="DRAWINGS">FIG. 4</figref><i>a </i>is a view for showing a mapping table of a first network;

<figref idref="DRAWINGS">FIG. 4</figref><i>b </i>is a view for showing a mapping table of a second network;

<figref idref="DRAWINGS">FIG. 5</figref> is a flowchart for explaining the process of exchanging information among the nodes of the networks according to the present invention;

<figref idref="DRAWINGS">FIG. 6</figref> is a flowchart for explaining the process of converting and transmitting a packet from one private network to another private network;

<figref idref="DRAWINGS">FIG. 7</figref> is a view for showing one example of variation of IP addresses and port values during the packet transmission according to the present invention;

<figref idref="DRAWINGS">FIG. 8</figref> is a flowchart for explaining the process of accessing the node of the network by using a Graphic User Interface (GUI) according to the present invention; and

<figref idref="DRAWINGS">FIG. 9</figref> is a view for showing an example of a screen displayed when accessing the IP address of the network.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

A system and method for access among nodes of private networks according to the present invention will now be described in greater detail with reference to the accompanying drawings.

<figref idref="DRAWINGS">FIG. 1</figref> is a view for showing the structure of a network according to the present invention. As shown in <figref idref="DRAWINGS">FIG. 1</figref>, first and second networks <b>20</b> and <b>30</b> are separate networks which are spaced from each other and usually used in the networks of SOHO or home networks where a plurality of information and communication devices are connected in a network.

The first network <b>20</b> includes one access node <b>20</b><i>a </i>and a plurality of network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, . . . , <b>20</b><i>n</i>. Here, the access node <b>20</b><i>a </i>is a router, gateway, switch, etc., for connecting the first network <b>20</b> to the Internet.

The network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, . . . , <b>20</b><i>n </i>are information and communication devices such as computers, printers, facsimiles, etc., which are used in connection with each other within one network.

The access node <b>20</b><i>a </i>of the first network <b>20</b> is assigned with a global IP address, while the other network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, . . . , <b>20</b><i>n </i>are assigned with private IP addresses which are used only in their network.

The private IP addresses may be provided by a network administrator, or automatically given through communication protocols such as DHCP.

Since the port number is a communication protocol of the network node, one node may have several port numbers.

Accordingly, in order to support several applications, the node is assigned with several external port values.

Described below is the case when one node is assigned with one port number.

Here, the global IP address assigned to the access node <b>20</b><i>a </i>of the first network <b>20</b> is SIP, while the private IP addresses and port numbers assigned to the other nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, . . . , <b>20</b><i>n </i>are LIP₁and LPN₁, LIP₂and LPN₂, . . . , and LIP_nand LPN_n, respectively.

The second network <b>30</b> includes one access node <b>30</b><i>a </i>and a plurality of network nodes <b>30</b><i>b</i>, <b>30</b><i>c</i>, . . . , <b>30</b><i>n. </i>

The structure of the second network <b>30</b> is almost identical to that of the first network <b>20</b> except that the second network <b>30</b> has DIP as a global IP address, while the network nodes <b>30</b><i>a</i>, <b>30</b><i>b</i>, . . . , <b>30</b><i>n </i>thereof are assigned with private IP addresses and port numbers LIP₁′ and LPN₁′, LIP₂′ and LPN₂′, . . . , LIN_n′ and LPN_n′, respectively.

The access system according to the present invention enables an access of the node of the first network <b>20</b> to the node of the second network <b>30</b>, i.e., from the access node <b>20</b><i>a </i>of the first network <b>20</b> to the access node <b>30</b><i>a </i>of the second network <b>30</b>.

<figref idref="DRAWINGS">FIG. 2</figref> is a block diagram for showing a private network access system according to the present invention.

As shown in <figref idref="DRAWINGS">FIG. 2</figref>, in order to gain access to a private network, the access system <b>40</b> includes an input device <b>42</b>, external port value assigning device <b>44</b>, mapping table <b>46</b>, address converting device <b>48</b>, exchanging device <b>50</b>, and outputting device <b>52</b>.

The external port value assigning device <b>44</b> collects information about respective internal nodes of the private networks and assigns separate external port values to the respective nodes.

The external port values, which are assigned to the network nodes of the private networks as above, are exchanged by the exchanging device <b>50</b> and stored in the mapping table <b>46</b>.

When a certain node of one private network accesses another node of another private network by using the external port value of another node of another private network, the address converting device <b>48</b> converts the external port value into a corresponding private IP address and internal port value of another node of another private network.

The method for accessing nodes of another private network will be described below.

The method for accessing nodes of another private network includes the steps of assigning external port values to the network nodes of the private networks, exchanging the external port values with each other, and converting the external port values and forwarding packets.

<figref idref="DRAWINGS">FIG. 3</figref> is a flowchart for explaining the step of assigning the external port values to the network nodes of the private networks.

According to the protocol of the present invention, the network nodes of the private network have to be assigned with external port values which can be used externally.

First, an access node of the one private network checks the type of network nodes (step S<b>202</b>).

Next, the access node collects response signals transmitted from the network nodes (step S<b>204</b>), and assigns external port values to the respective network nodes (step S<b>206</b>).

When the external port values are assigned to the network nodes, the external port values are stored in a mapping table (step S<b>208</b>).

<figref idref="DRAWINGS">FIG. 4</figref> shows the mapping table, in which <figref idref="DRAWINGS">FIG. 4</figref><i>a </i>shows the mapping table of the first private network <b>20</b> while <figref idref="DRAWINGS">FIG. 4</figref><i>b </i>shows the mapping table of the second network <b>30</b>.

As shown in <figref idref="DRAWINGS">FIGS. 4</figref><i>a </i>and <b>4</b><i>b</i>, each of the first and second private networks <b>20</b> and <b>30</b> has a mapping table storing a hardware address, private IP address, internal port value, global IP address, and external port value.

The private networks that do not use the IP store hardware addresses in the mapping tables to gain access to each other.

Meanwhile, it is determined whether to permit another network provided with a global IP address to access a certain private network by using the Graphic User Interface (GUI) (step S<b>209</b>). If yes, based on the node information in the mapping tables, a web page is generated, displaying a screen containing a private IP address, internal port values and global IP address, and external port values of the certain private network (step S<b>210</b>).

Accordingly, node information of the certain private network becomes available when the network having a global IP address accesses the web page of the certain private network by using the GUI.

As described, when using the protocol that enables information exchange between the internal network nodes of two separate networks which are spaced from each other, the node information of both networks can be available to each other by using the mapping tables.

<figref idref="DRAWINGS">FIG. 5</figref> is a flowchart for explaining the process of exchanging the network node information among the first and second networks <b>20</b> and <b>30</b> which are spaced from each other.

The first network node <b>20</b><i>b </i>of the first network <b>20</b> (hereinafter called ‘node <b>1</b>:<b>1</b>’) forwards a packet to a certain network node of the second network <b>30</b> to check whether or not the certain node of the second network <b>30</b> uses the protocol according to the present invention as the node <b>1</b>:<b>1</b> has (step S<b>302</b>).

When there is a response from the certain node of the second network <b>30</b> at once or after several attempts (step S<b>304</b>), it is determined that the certain node of the second network <b>30</b> uses the same protocol as the node <b>1</b>:<b>1</b> of the first network <b>20</b>. Accordingly, the node <b>1</b>:<b>1</b> recognizes the IP address of the certain node (step S<b>306</b>). If there is no response from the certain node of the second network <b>30</b>, the process is finished.

As a result, the packet is forwarded from the source network node to the access node of the destination network (step S<b>405</b>).

When the packet is forwarded to the access node of the destination network, the global IP address and external port values of the source and destination networks are converted into the private IP address and internal port value (step S<b>406</b>).

Accordingly, the packet is forwarded to the network node which has internal port value (step S<b>408</b>).

<figref idref="DRAWINGS">FIG. 7</figref> is a view for showing the variation of the IP address and port values during the transmission of the packet according to the present invention.

The private IP address and port values of the node <b>1</b>:<b>1</b>, i.e., the source network node are LIP₁and LPN₁, while the private IP address and port values of the node <b>1</b>:<b>2</b>, i.e., the destination network node are LIP₁′ and LPN₁′, respectively.

A packet having the private IP addresses and port values of the source and destination network nodes (S and D) is forwarded from the node <b>1</b>:<b>1</b>:

S: LIP₁, LPN₁

D: LIP₁′, LPN₁′

According to the mapping table (see <figref idref="DRAWINGS">FIG. 4</figref>) stored in the access node <b>20</b><i>a </i>of the first network <b>20</b>, the private IP address and port value are converted into global IP addresses and external port values.

S: SIP, GPN₁

D: DIP, GPN₁′

The packet having the global IP address and external port value of the source and destination network nodes (S and D) is forwarded to the access node <b>30</b><i>a </i>of the second network <b>30</b> via the Internet.

Then, according to the mapping table (see <figref idref="DRAWINGS">FIG. 4</figref>) stored in the access node <b>30</b><i>a </i>of the second network <b>30</b>, the global IP address and external port values are converted into the private IP address and internal port values:

S: LIP1, LPN₁

D: LIP1′, LPN₁′

Then the packet having the private IP address and port values of the source and destination network nodes (S and D) is forwarded to the node <b>1</b>:<b>2</b>.

Meanwhile, in the step S<b>302</b> of forwarding the packet from the node <b>1</b>:<b>1</b> to the certain node of the second network <b>30</b> to check whether the certain node of the second network <b>30</b> uses the same protocol as the node <b>1</b>:<b>1</b> according to this embodiment of the present invention (see <figref idref="DRAWINGS">FIG. 5</figref>), when there is no response from the certain node of the second network <b>30</b> within a predetermined period, it is determined that the certain node does not use the same protocol as the protocol of the node <b>1</b>:<b>1</b>.

Accordingly, it is determined that information can not be exchanged between the node <b>1</b>:<b>1</b> and network nodes of the second network <b>30</b>.

Meanwhile, if the first network <b>20</b> has a web page displaying the private IP addresses, internal port values, global IP address, and external port values of the respective network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, and <b>20</b><i>d</i>, a node having the global IP address may access the second network <b>30</b> via the Internet.

<figref idref="DRAWINGS">FIG. 8</figref> is a flowchart for explaining the process of recognizing node information of a network by using a GUI.

In order to obtain the node information of the first network which has a global IP address, a web browser is used (step S<b>602</b>).

Then, a web page is accessed, by inputting the global IP address of the destination such as http://GIP/home.html (step S<b>604</b>).

When accessed, the web page is displayed, usually containing icons for the respective nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, <b>20</b><i>d</i>, and <b>20</b><i>e. </i>

<figref idref="DRAWINGS">FIG. 9</figref> shows an exemplary screen, which is displayed when accessing the IP address of the first network <b>20</b>.

As a user drags a cursor to an icon for the access node <b>20</b><i>a </i>of the first network <b>20</b>, the global IP address and external port values of the access node <b>20</b><i>a </i>are displayed at the lower end of the screen as follows:

http://GIP:GPN1

Here, the ‘http’ uses a certain port number as its default value such as 0×80.

The port number may vary depending on the types of communication protocols being employed such as http, FTP, TELNET, etc.

When the user clicks an icon for the node she/he wishes to access (step S<b>608</b>), a packet having an external port number of the node <b>20</b><i>a </i>is forwarded (step S<b>610</b>).

The information of the packet is converted at the access node <b>20</b><i>a </i>into an internal port values for the network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, <b>20</b><i>d</i>, and <b>20</b><i>e</i>, and forwarded to the network nodes <b>20</b><i>b</i>, <b>20</b><i>c</i>, <b>20</b><i>d</i>, and <b>20</b><i>e </i>(step S<b>612</b>).

As described, as for the network provided with a global IP address, the node information of the network can be obtained by accessing the global IP address and web page thereof via the GUI such as http, etc.

Although this embodiment has been described in the case where the IP is employed, it is also applicable to the case without the IP. For example, in an IEEE1394 network, the node information is collected during an initialization of the IEEE1394.

Accordingly, assigning the external port values from the access node to the network nodes is performed simultaneously with the initialization of the IEEE1394 network.

Further, based on the assigned external port values, the conversion is performed between the IP packet and IEEE1394.

More specifically, while the IP packet having a certain external port value is forwarded from the other network, the IEEE1394 packet having a certain node ID is transmitted within the network. The IP packet is converted into the IEEE1394 at the access node of the network.

As described above, with an access system and method for accessing a node of the private network according to the present invention, access to the private network, which is not provided with the global IP address, becomes possible.

Further, according to the present invention, by accessing a plurality of communication devices within a private network with a single IP address, excessive use of IP addresses can be avoided.

As stated above, the preferred embodiment of the present invention is shown and described. Although the preferred embodiment of the present invention has been described, it is understood that the present invention should not be limited to this preferred embodiment but various changes and modifications can be made by one skilled in the art within the spirit and scope of the present invention as hereinafter claimed.